PT-2026-144906

CVE-2026-126248

·

Published

2026-11-10

·

Updated

2026-11-11

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-522: Insufficiently Protected Credentials
Related identifiers
CVE-2026-126248
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com